GPENGIAC Penetration Tester Certification (GPEN) practice exams
Original questions written from the published objectives and cited to official documentation, never recalled exam content. How we verify, why not dumps.
- Exam code
- GPEN
- Cost
- $999USD
- Questions
- 82questions
- Duration
- 180minutes
- Passing score
- 73percent
- Level
- Mid level
- Valid for
- 4years
- Study guide
- How to prepare
- Sources
- 58official pages
- Format
- 1proctored exam. GIAC states that all GIAC certification exams are web based and required to be proctored, with remote proctoring through ProctorU and onsite proctoring through PearsonVUE. GIAC lists GPEN under its CyberLive hands-on testing format.
GPEN practice exams
One full-length form, 82 questions each, apportioned to the published domain weightings.
Still being written. Domain Drill opens when every domain holds 12 verified questions. Still short: Penetration Test Planning and Azure Attacks and AD Integration.
What the exam tests
Exam domains
GIAC publishes the GPEN Exam Certification Objectives and Outcome Statements as a list of sixteen objectives with no percentages attached. The six groupings above and the percentages assigned to them are ours. We built them by grouping GIAC's published objective titles into related clusters and spreading 100 points across those clusters. They are a study aid for planning review time, not an official GIAC weighting, and GIAC does not endorse them.
The percentage is the exam weighting; the bar is how many verified questions we hold there, so a short bar is where our bank is thin.
- Penetration Test Planning10%8 verified
- Reconnaissance, Scanning, and Vulnerability Discovery18%15 verified
- Exploitation and Privilege Escalation20%16 verified
- Password Attacks and Hashes22%18 verified
- Domain Escalation, Kerberos, and Persistence18%15 verified
- Azure Attacks and AD Integration12%10 verified
Open now. One complete practice exam, 82 questions and Quick Practice on all 82 verified questions.
Opens next. Domain Drill opens when every domain holds 12 verified questions. Still short: Penetration Test Planning and Azure Attacks and AD Integration.
Every question here is checked against the official page it cites before it serves, which is why the count grows slowly.
Where to focus: GIAC lists sixteen objectives with no weighting, but four of them concern passwords, formats, and hashes and four more concern Active Directory, Kerberos, and Azure or Entra ID, so split review time along that spread instead of assuming even coverage. GIAC also states the CyberLive portion is currently delivered at the end of the exam, so practice working inside a lab environment and switching back to the question interface while a clock is running.
What the exam actually asks you to do
A CyberLive exam. Some of the questions put you into a live machine with the real tools and score what you do there. GIAC does not publish how many of the 82 are hands-on, so neither do we.
Item formats
- Multiple choice
- Hands-on lab
The highlighted formats are the ones you cannot answer from memory alone. GIAC, GPEN certification details ↗
Between sittings
The same bank the numbered forms are assembled from.
Open now
Quick Practice
All 82 verified questions, untimed, with the explanation after each answer.
Opens later
Domain Drill
Opens when every domain holds 12 verified questions. Still short: Penetration Test Planning, Azure Attacks and AD Integration.
Fills as you go
Review Missed
Re-asks the questions you got wrong. Nothing to review until you miss something.
GIAC’s free resources
Study from the source. Everything below is published by the vendor, free to read, and is what our own questions are written from:
Official GPEN exam page & objectives ↗Keep reading
Free GPEN practice test
Ten real questions, playable now. No account, no card.
GPEN passing score
The exact cut score, what kind of number it is, and the retake terms.
How hard is GPEN?
An honest difficulty read from the format, the clock and the weights.
Frequently asked questions
How much does the GPEN exam cost?
GIAC's pricing page lists the GPEN certification attempt at $999. The same row lists an exam retake at $899, an attempt extension at $479, a certification renewal at $499, and a practice exam at $399. GIAC also notes a $175 reseating fee for missed proctored exam appointments.
Is the GPEN exam hands-on?
GIAC lists GPEN under CyberLive, which it describes as a hands-on exam format that replaces traditional multiple-choice testing with performance-based challenges in realistic lab environments. GIAC does not publish how many of the 82 questions are CyberLive items, and its CyberLive FAQ says the share of the final score varies by examination. GIAC does say the CyberLive portion is currently delivered at the end of the exam and that exam timing accounts for the time it takes.
Does GPEN have prerequisites?
GIAC does not publish a prerequisite on the GPEN certification page. Under How To Prepare it lists training available in a variety of modalities including live training and OnDemand, practical work experience, and college level courses or self-paced study through other programs or materials.
How long does GPEN stay valid, and how is it renewed?
GIAC states that its certifications require renewal every four years, and answers its own question 'How many years is my certification active for?' with 'Four Years'. Renewal is either 36 CPE credits collected over four years or retaking the exam, plus a non-refundable $499 maintenance fee due once every four years at the time of registration.
Ready to practice for GPEN?
Five questions from across every practice exam, plus 10 questions per certification in bank practice, with no account. Full explanations on every single one.